qemu: can't find iptables filter/kernel module

[jratmichael]

I'm trying to run a VM through virt-manager, this worked previously on my system, i don't know what update changed what over the past year. I just recompiled the everything in that i thought was needed from Wiki:Iptables but i still don't have the module/support for it at all.

Code: Select all

Could not start virtual network 'default': internal error: Failed to run firewall command iptables -w --table filter --list-rules: modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.18.7-gentoo-x86_64
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.


Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/device/netlist.py", line 213, in _check_network_is_running
    netobj.start()
  File "/usr/share/virt-manager/virtManager/object/libvirtobject.py", line 57, in newfn
    ret = fn(self, *args, **kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/virt-manager/virtManager/object/network.py", line 61, in start
    self._backend.create()
  File "/usr/lib/python3.12/site-packages/libvirt.py", line 3623, in create
    raise libvirtError('virNetworkCreate() failed')
libvirt.libvirtError: internal error: Failed to run firewall command iptables -w --table filter --list-rules: modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.18.7-gentoo-x86_64
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

here's my .config

[NeddySeagoon]

You have the new netfilter enabled but QEMU wants to use iptables, which is disabled.

Code: Select all

# CONFIG_NETFILTER_XTABLES_COMPAT is not set
# CONFIG_NETFILTER_XTABLES_LEGACY is not set

When you enable one/both of those options, you will be able to see the iptables (legacy) settings.

[pietinger]

I'm trying to run a VM through virt-manager, this worked previously on my system, i don't know what update changed what over the past year. [...]

Do you use kernel version 6.17 or 6.18?

If yes, the answer is number 4 of https://wiki.gentoo.org/wiki/User:Pieti ... 17#Upgrade

Maybe check also the differences here:

https://wiki.gentoo.org/wiki/User:Pieti ... ng_support
<==>
https://wiki.gentoo.org/wiki/User:Pieti ... ng_support

[grknight]

Alternatively consider the nftables USE on net-firewall/iptables and then run eselect iptables set xtables-nft-multi after rebuilding

This will let old commands use newer kernel interfaces.

Note that legacy created tables will not be available with this switch so delete and restore of rules or a reboot may be required